We are currently using Panorama 5.0.11 Version .
Most of the website is blocking due to this version .
We have already requested brightcloud to recategorized the URL to new one .
But still we are facing the issuue.
Like widma.com coming to Adult and porn category .
Also how to clear the URL cache via CLI.
Solved! Go to Solution.
I have done quick test on my test PA box for URL widma.com which is categorized as business-and-economy
> test url widma.com
widma.com business-and-economy (Base db)
you can clear URL cache on your Palo Alto device to assist in making sure the category is reflected correctly
> clear url-cache all
> delete dynamic-url host name widma.com
Please make sure that you've updated Bright-cloud to the latest version 4261.
PanOS version has nothing to do with blocking of the URL. Each individual firewall will have dynamic update section. You need to make sure that you are updating the URL database on regular basis. Here is a link of doc that explains on the setup and automatically updating it.
other than that, if you are looking to understand How Panorama Retrieves BrightCloud Updates. The following document can explain you that
However if you are seeing a different result when you are testing the URL from CLI and actual category. Following document explains it
And the following documents explains how to clear the url cache
Hope this helps in resolving the issue.
Cache is cleared completely when the "dynamic url cache timeout" timer expires ,you can change it to 24 hours instead of 168 hours ( 7 days ) default. This value is used to determine the length of time an URL entry can remain in the cache after it is from the URL filtering service.
Dynamic URL cache timeout value is used when the setting "Dynamic URL Filtering" is enabled on URL filtering profiles which will access the Bright-cloud database in the cloud for the latest categorization information. Otherwise, the URL filtering engine will only check for categorization on-device cache.
More information on URL categorization can be found here: URL Categorization Components and Process
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!